Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: q6sJLyYDQTSxY6SMGW0UGNtYOWXBwOy8wth/0UhTWEM=
Subject key identifier: 68:E6:EE:FB:F6:7A:5A:D5:54:4D:2F:55:7C:0B:90:E4:F6:90:46:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 067CBC5B5637AE827D1C1C179157E94D975B4AC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:23 +0000
ROA not before: Thu 23 Jul 2026 07:21:23 +0000
ROA not after: Thu 22 Jul 2027 07:26:23 +0000
asID: 2914
IP address blocks: 145.79.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7c:bc:5b:56:37:ae:82:7d:1c:1c:17:91:57:e9:4d:97:5b:4a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:23 2026 GMT
Not After : Jul 22 07:26:23 2027 GMT
Subject: CN=68E6EEFBF67A5AD5544D2F557C0B90E4F69046F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:c6:58:c2:57:8d:30:7e:e5:85:fd:55:17:
9c:b3:30:16:f0:49:1d:0b:96:15:82:e4:c5:65:28:
aa:3d:80:c4:fa:ad:77:55:4c:d2:6a:2c:e6:83:8f:
b7:a6:36:57:37:2d:98:07:b3:21:c1:7e:75:d9:46:
1c:27:33:d3:a4:cb:66:1b:99:60:20:cd:65:0d:88:
ca:50:5c:7b:f4:d2:16:d8:d6:cd:b6:94:c2:fb:94:
a4:9d:b0:c2:b3:b6:60:7e:cf:66:31:12:d0:7c:f6:
03:c1:19:e7:b7:2e:71:a6:f7:d0:f2:5b:a0:70:18:
37:1d:11:ba:b8:33:79:9f:18:6d:82:62:61:88:7a:
d1:fd:67:69:db:58:e4:ca:e2:6a:a1:90:e7:81:24:
73:49:52:58:4f:01:fa:d8:fa:48:de:67:74:f2:e9:
7e:99:06:76:34:bd:60:d2:b7:d5:b5:29:02:4e:f5:
02:c7:b1:6b:8d:9a:a1:c0:bf:b7:55:2f:21:04:d8:
e3:db:85:4e:ed:3e:03:41:af:59:32:37:2a:d3:bf:
91:da:a0:78:75:c9:08:20:73:65:06:6f:ce:21:29:
1b:06:71:73:0f:d1:2c:9a:68:63:9f:cb:ec:51:83:
1c:55:65:8e:37:bf:7d:e0:99:e6:09:2e:2f:25:75:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:EE:FB:F6:7A:5A:D5:54:4D:2F:55:7C:0B:90:E4:F6:90:46:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.74.0/24
Signature Algorithm: sha256WithRSAEncryption
59:92:5f:28:5c:48:9b:bb:55:37:d4:4c:4e:33:e0:18:52:2b:
a7:f0:59:7e:b6:62:83:3c:d2:1d:c5:19:97:63:f5:ec:ad:96:
91:0e:9e:7c:bf:55:9c:ca:3d:d9:82:bf:c7:65:1e:33:ea:17:
0e:a6:c1:30:02:ad:15:6b:0f:d7:c0:19:43:f8:67:a6:8e:7c:
10:d5:7b:fa:08:2a:79:19:0f:40:c2:d4:85:22:83:50:24:dc:
0b:b8:c1:ed:50:1f:41:d7:71:2b:f3:a4:54:57:89:de:d0:2e:
8e:37:4e:cf:f9:76:df:7f:0d:73:79:48:71:c0:2c:aa:73:02:
92:ab:b7:87:79:d3:5c:95:bb:65:cd:24:5e:6b:a7:8a:4e:ba:
32:b7:64:cf:7e:e1:bd:d3:d4:e6:f4:5b:26:37:0b:b2:d4:66:
fe:d4:2d:de:75:72:3a:5a:1e:12:73:38:0a:b5:02:2a:8d:35:
e7:34:5b:51:7e:de:0a:32:84:d0:a0:e8:a2:f5:7d:05:d6:20:
0c:0c:f6:ff:11:97:eb:29:55:c1:ee:84:78:5f:98:35:73:33:
d1:98:18:9b:24:67:ee:2d:ef:b1:06:cf:30:1d:69:00:00:f7:
5e:53:07:41:ca:bb:dc:60:dc:c0:b2:aa:4f:b5:32:cc:6f:86:
8a:40:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:19 2026 by rpki-client